@magpie-community/opencode-workbuddy-auth 0.1.16 → 0.1.17

package/index.mjs

@@ -1350,6 +1350,18 @@ const REFUSED_HINT =
   "WorkBuddy refuses chats from Codex and Claude Code (their system prompt); use it from Hermes, OpenCode or Pi, or add another provider to this group"
 const REFUSED = /unapproved channel|illegal api invocation/i
 
+// RESTRICTED_HINT is what the user can do about WorkBuddy's 403 code 11140
+// "request illegal", whose displayMsg says "Your account has been restricted
+// due to unusual activity" (magpie #1849): the account is out until WorkBuddy
+// lifts the restriction, which an appeal asks for. It ends the error's
+// message as magpie's built-in puts it (provider.WBRestrictedHint), word for
+// word, so magpie rests the account for hours rather than minutes.
+const RESTRICTED_HINT =
+  "WorkBuddy restricted this account for unusual activity; it stays out until WorkBuddy lifts that, which an appeal (Submit feedback in WorkBuddy) asks for"
+const RESTRICTED_CODE = 11140
+// The code is matched whole, as with 14018: 111400 is another error.
+const RESTRICTED_TEXT = /account has been restricted due to unusual activity|账号存在异常行为|帳號存在異常行為|["']code["']\s*:\s*["']?11140(?![\d.])/i
+
 // EXHAUSTED_HINT explains WorkBuddy's requirement of an active package
 // even for 0-rate / free models. When an account has no packages or 0 credits,
 // WorkBuddy returns code 14018 ("Credits exhausted...").
@@ -1367,7 +1379,7 @@ function kept(res) {
   return new Response(res.body, { status: res.status, statusText: res.statusText, headers })
 }
 
-// explained is res with REFUSED_HINT or EXHAUSTED_HINT added to that refusal's message.
+// explained is res with REFUSED_HINT, RESTRICTED_HINT or EXHAUSTED_HINT added to that refusal's message.
 // Each refusal says the sign-in is kept: the built-in passed WorkBuddy's
 // 401 on and never marked a WorkBuddy account lapsed.
 async function explained(res) {
@@ -1386,8 +1398,9 @@ async function explained(res) {
   const at = v?.error && typeof v.error === "object" ? v.error : v && typeof v === "object" ? v : null
   const code = at?.data?.code ?? at?.code ?? v?.code ?? v?.data?.code
   const isRefused = REFUSED.test(text)
-  const isExhausted = code === 14018 || Number(code) === 14018 || EXHAUSTED_TEXT.test(text)
-  if (!isRefused && !isExhausted) return again(text)
+  const isRestricted = !isRefused && (Number(code) === RESTRICTED_CODE || RESTRICTED_TEXT.test(text))
+  const isExhausted = !isRestricted && (code === 14018 || Number(code) === 14018 || EXHAUSTED_TEXT.test(text))
+  if (!isRefused && !isRestricted && !isExhausted) return again(text)
 
   let msg = text.trim()
   if (at && typeof at.message === "string") msg = at.message
@@ -1396,9 +1409,9 @@ async function explained(res) {
   else if (typeof v?.msg === "string" && v.msg) msg = v.msg // WorkBuddy's own {"code", "msg"}
   else if (typeof v?.data?.msg === "string") msg = v.data.msg
 
-  const hint = isRefused ? REFUSED_HINT : EXHAUSTED_HINT
-  const type = isRefused ? "permission_error" : "insufficient_quota"
-  const errCode = isRefused ? null : 14018
+  const hint = isRefused ? REFUSED_HINT : isRestricted ? RESTRICTED_HINT : EXHAUSTED_HINT
+  const type = isRefused || isRestricted ? "permission_error" : "insufficient_quota"
+  const errCode = isRefused ? null : isRestricted ? RESTRICTED_CODE : 14018
   msg = `${msg} — ${hint}`
   const headers = new Headers(res.headers)
   headers.set("content-type", "application/json")
@@ -1412,4 +1425,4 @@ export const WorkBuddyAuthPlugin = makePlugin(SITES.workbuddy)
 export const WorkBuddyAIAuthPlugin = makePlugin(SITES["workbuddy-ai"])
 
 // for tests
-export const _internal = { textOnly, runsOutOf, packagesOf, endOf, enterpriseHeaders, enterpriseOf, liveModels, browserSignIn, withSystem, normalizeToolChoice, fitTools, fitted, renamed, unflagged, usageOf, desktopHeld, explained, REFUSED_HINT, EXHAUSTED_HINT, freeCredits, creditsOf, fresh, SITES, renewing, renewed, SESSION, attend, turnKey, conversationKey, signatureOf }
+export const _internal = { textOnly, runsOutOf, packagesOf, endOf, enterpriseHeaders, enterpriseOf, liveModels, browserSignIn, withSystem, normalizeToolChoice, fitTools, fitted, renamed, unflagged, usageOf, desktopHeld, explained, REFUSED_HINT, RESTRICTED_HINT, EXHAUSTED_HINT, freeCredits, creditsOf, fresh, SITES, renewing, renewed, SESSION, attend, turnKey, conversationKey, signatureOf }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@magpie-community/opencode-workbuddy-auth",
-  "version": "0.1.16",
+  "version": "0.1.17",
   "description": "OpenCode provider plugins for WorkBuddy's plans: WorkBuddy (CodeBuddy, copilot.tencent.com) and WorkBuddy AI (www.workbuddy.ai)",
   "type": "module",
   "main": "./index.mjs",